This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json) Hash identifier: vn0OBgMlAkbErsCotRMDDYNpCXrGVMLDrRR2uiM489U= Subject key identifier: 19:B4:0D:62:91:72:42:39:2D:51:64:B8:D0:F3:27:45:66:8D:C3:F1 Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05 Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05 Certificate serial: 019AFF1F9CE19BF9BD0BB61FD9CF3154F4FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft Manifest number: F2 Signing time: Mon 08 Dec 2025 18:00:53 +0000 Manifest this update: Mon 08 Dec 2025 18:00:53 +0000 Manifest next update: Tue 09 Dec 2025 18:00:53 +0000 Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: RKFjQWkM+P8AChXJzdzvwhR6hNJUVCfe2lUmJ1OgfjQ=) 2: fV1WZCcdLfEsqw2EdlQm5P-L0is.roa (hash: 0XqccHFLFqDbT7tC/mcDP32ySvfNB41cuIO9KikZ3oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 16:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:1f:9c:e1:9b:f9:bd:0b:b6:1f:d9:cf:31:54:f4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05 Validity Not Before: Dec 8 18:00:53 2025 GMT Not After : Dec 9 18:00:53 2025 GMT Subject: CN=19b40d62917242392d5164b8d0f32745668dc3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:91:31:38:29:1a:bf:73:08:43:ac:18:6f: 0b:b4:e2:4c:df:ed:fd:62:ec:fe:89:d2:b6:4b:7d: 85:dc:69:ff:b0:43:2f:e9:a9:df:3e:64:ba:ca:26: ce:0c:cc:23:96:90:f2:36:81:c7:53:2d:12:62:11: 1d:31:01:0c:f9:76:a2:3e:29:64:ee:ce:f0:d3:e8: 6b:3d:3a:2d:65:5b:bf:85:8f:31:20:f7:33:1b:49: ee:8c:a3:25:7b:99:c7:45:09:c3:69:42:8f:2d:3e: 53:ac:aa:ac:ab:3c:ee:5f:a0:ea:d5:f2:78:45:3f: f6:82:9d:9f:d8:41:08:f7:90:31:e0:c0:b2:5e:7c: 20:5c:15:5c:85:38:36:a8:6b:56:36:51:59:56:7b: 81:8d:57:7e:d7:5e:44:95:cf:02:13:65:73:62:af: d7:ee:d3:ab:9f:93:c6:20:01:0f:59:eb:8b:bb:28: eb:e7:4b:2f:8b:94:c4:c9:ae:df:78:21:11:c3:31: 16:fe:6c:5f:b4:7c:10:8a:eb:d3:09:70:b6:3b:77: 8d:f2:53:cc:17:78:83:17:d8:c0:41:aa:39:0d:42: 1b:84:3d:ea:4c:b2:db:37:14:de:c6:96:dd:e4:89: f0:a6:eb:93:03:5c:e9:59:48:77:fe:99:c6:f8:90: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B4:0D:62:91:72:42:39:2D:51:64:B8:D0:F3:27:45:66:8D:C3:F1 X509v3 Authority Key Identifier: keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:53:0c:50:b7:aa:a9:68:ab:11:53:03:99:d3:bd:6b:3b:2d: 91:f1:00:e9:2d:01:78:92:06:54:c2:de:fc:3d:4b:ba:93:32: 16:34:4e:59:1b:fe:43:ce:aa:9e:d9:b6:be:d1:46:d6:17:6e: 97:2c:f1:2f:63:1d:15:27:e1:39:de:09:02:0e:37:aa:4e:38: 6f:45:16:41:09:0e:c9:8d:de:fb:f3:71:b4:0e:60:91:ca:6c: 1c:d5:21:05:08:ca:3e:5a:72:fc:ff:a1:6a:07:ec:54:c1:85: db:01:b3:a6:2e:a2:d8:68:74:01:85:fe:3d:26:4b:c6:c8:bb: 48:a6:04:8a:08:5d:92:9b:bb:58:77:37:fe:45:c0:21:ee:67: 6b:02:ef:21:44:0c:cd:db:7a:04:50:e5:e2:67:20:3d:9b:8f: a0:2f:86:18:e8:c0:6d:4a:c8:f2:11:f2:52:15:ca:2b:82:e6: d5:15:a6:48:97:f8:d2:79:c5:fd:ea:2b:30:68:44:24:47:82: 70:1a:41:4e:3c:48:52:e2:15:64:e9:8e:bd:49:4f:f2:02:27: 9d:85:1d:b9:e7:ef:ae:16:5f:7a:c4:af:85:77:81:05:77:ea: eb:25:3a:28:ad:de:2e:9e:4e:30:9c:6f:18:de:52:f6:ca:ed: 15:fb:66:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr/H5zhm/m9C7Yf2c8xVPT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2QxMzE4YzkxOWM2ZWYxNmQyNGNhNzg0NjJhMGI3ZGUx NGJhMDUwHhcNMjUxMjA4MTgwMDUzWhcNMjUxMjA5MTgwMDUzWjAzMTEwLwYDVQQD EygxOWI0MGQ2MjkxNzI0MjM5MmQ1MTY0YjhkMGYzMjc0NTY2OGRjM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy6RMTgpGr9zCEOsGG8LtOJM3+39 Yuz+idK2S32F3Gn/sEMv6anfPmS6yibODMwjlpDyNoHHUy0SYhEdMQEM+XaiPilk 7s7w0+hrPTotZVu/hY8xIPczG0nujKMle5nHRQnDaUKPLT5TrKqsqzzuX6Dq1fJ4 RT/2gp2f2EEI95Ax4MCyXnwgXBVchTg2qGtWNlFZVnuBjVd+115Elc8CE2VzYq/X 7tOrn5PGIAEPWeuLuyjr50svi5TEya7feCERwzEW/mxftHwQiuvTCXC2O3eN8lPM F3iDF9jAQao5DUIbhD3qTLLbNxTexpbd5InwpuuTA1zpWUh3/pnG+JDSmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm0DWKRckI5LVFkuNDzJ0VmjcPxMB8GA1UdIwQY MBaAFBfNExjJGcbvFtJMp4RioLfeFLoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2Mt OTM3NDJjNDhlMGZlLzEvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2MtOTM3NDJjNDhlMGZl LzEvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1MMULeq qWirEVMDmdO9azstkfEA6S0BeJIGVMLe/D1LupMyFjROWRv+Q86qntm2vtFG1hdu lyzxL2MdFSfhOd4JAg43qk44b0UWQQkOyY3e+/NxtA5gkcpsHNUhBQjKPlpy/P+h agfsVMGF2wGzpi6i2Gh0AYX+PSZLxsi7SKYEighdkpu7WHc3/kXAIe5nawLvIUQM zdt6BFDl4mcgPZuPoC+GGOjAbUrI8hHyUhXKK4Lm1RWmSJf40nnF/eorMGhEJEeC cBpBTjxIUuIVZOmOvUlP8gInnYUduefvrhZfesSvhXeBBXfq6yU6KK3eLp5OMJxv GN5S9srtFftmYw== -----END CERTIFICATE-----Generated at Tue Dec 9 01:42:34 2025 by rpki-client